automation-recon-pipeline

SUSPICIOUS: the skill is internally coherent for bug-bounty automation, but it gives an AI agent offensive recon/scanning capability and encourages unattended continuous execution. Install trust is mostly acceptable for official ProjectDiscovery tools, with moderate residual supply-chain risk from unpinned installs and the third-party `anew` utility. No clear credential harvesting or covert exfiltration is present.